TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
<nit> I believe those (ESP/AH) are IP protocol numbers, not TCP port numbers. </nit> Chuck L. -----Original Message----- From: Steve Bernard [mailto:[EMAIL PROTECTED]] Sent: Tuesday, October 23, 2001 9:46 AM To: [EMAIL PROTECTED] Subject: RE: How to filter out protocols other than ICMP/TCP/UDP? Are you sure you mean IKE, as in Internet Key Exchange? IKE is used as part of IPSec, which involves a number of protocols to negotiate and establish a secure connection. IKE itself is based in part on ISAKMP, which uses TCP/UDP port 500. If your IPSec implementation is using a PKI as part of its authentication, you may also see TCP port 389 (LDAP). Depending on the type of security negotiated, IPSec itself will use either Encapsulating Security Payload (ESP), TCP port 50, or Authentication Header (AH), TCP port 51. http://www.ietf.org/rfc/rfc2409.txt Steve
